A signature the platform can't forge
A checksum proves the bytes match the manifest, but says nothing about who wrote the manifest. Why self-update needs a signature instead.
Tags
88 pages
Go
Telemetry that asks, and telemetry that doesn't
Two telemetries with opposite consent defaults on one OTLP layer: consent-gated analytics for a CLI, implied-consent observability for a service.
Building a web service with go-tool-base, part 6: seeing what your service is doing
Add OpenTelemetry traces, metrics and logs to a Go service with middleware and manual spans, and get one end-to-end trace through the gateway.
Building a web service with go-tool-base, part 5: docs that write themselves
Generate an OpenAPI v3 document from an annotated proto file and serve it from the same HTTPS server with an embedded Stoplight Elements UI.
Building a web service with go-tool-base, part 4: REST for free, with the gateway
Replace a hand-written REST layer with grpc-gateway: add google.api.http annotations, generate the gateway, and delete the duplicate encoding.
Building a web service with go-tool-base, part 3.5: the same server, now a website
Serve HTML from the same Go HTTP server using html/template and embed, baking templates and static assets straight into the binary.
Building a web service with go-tool-base, part 3: a REST service, by hand and by spec
Two ways to put REST on a Go service: a hand-written net/http ServeMux, and generated handlers from an OpenAPI spec with oapi-codegen.
Building a web service with go-tool-base, part 2: a gRPC service, with TLS
Define a protobuf contract, generate Go with buf, implement a gRPC server over a domain store, and turn on hardened TLS with mkcert and ALPN.
Building a web service with go-tool-base, part 1: lifecycle and graceful shutdown
Service lifecycle in Go: register services with start and stop verbs, handle SIGINT and SIGTERM, and shut down gracefully with liveness checks.
Building a CLI with go-tool-base, part 5: a CLI that updates itself
Add self-update to a Go CLI: resolve releases per platform, compare versions, verify checksums and migrate config on upgrade.
